Patch: Mandrake Linux usermode flaw

According to an alert from Mandrake Linux, "The /usr/bin/shutdown command that comes with the usermode package can be executed by local users to shutdown all running processes and drop into a root shell. This command is not really needed to shutdown a system, so it has been removed and all users are encouraged to upgrade."

The updated packages are available at: advisory.php?name=MDKSA-2003:031

Join the newsletter!

Error: Please check your email address.

More about Mandrake

Show Comments